Components

Application Security Management (IAST)

• 🐛 Limit the collections that the iast visitor can handle (#7764 - @manuel-alvarez-alvarez)
• Add taint propagation to the String indent method (#7707 - @Mariovido)
• Add propagation to String strip methods (#7684 - @Mariovido)

Application Security Management (WAF)

• ⚡ Prevent publishing the same usr.id to the WAF twice (#7699 - @manuel-alvarez-alvarez)
• ✨ Ensure 'attempt to replace context value' logs are set to debug (#7698 - @manuel-alvarez-alvarez)
• Add support for waf_timeout tag in telemetry (#7696 - @jandro996)

Build & Tooling

• ✨ Enable Single Step Instrumentation Guardrails (#7568 - @PerfectSlayer)

Continuous Integration Visibility

• Ensure test session trace ID and span ID are the same (#7747 - @nikita-tkachenko-datadog)
• Update bundled Jacoco version (#7736 - @nikita-tkachenko-datadog)
• Revert HTTP client sharing in CI Vis components (#7734 - @nikita-tkachenko-datadog)
• Trace Maven and Gradle build tasks (#7721 - @nikita-tkachenko-datadog)
• Trace setup and teardown operations in JUnit 5 (#7714 - @nikita-tkachenko-datadog)
• Propagate module context from build system process to child JVM processes (#7710 - @nikita-tkachenko-datadog)

Crash tracking

• 🐛 Fix crashtracking log parser (#7697 - @PerfectSlayer)

Data Streams Monitoring

• Add avro schema object extraction (#7712 - @ericfirth)
• ⚡ Improve data streams performance (#7749 - @piochelepiotr)

Dynamic Instrumentation

• 🐛 Fix hoisting local vars for Kotlin code (#7758 - @jpbempel)
• Fix mixed local vars for suspend funs in Kotlin (#7748 - @jpbempel)
• Rename the DebuggerProbe to TriggerProbe (#7737 - @evanchooly)
• 🐛 Fix Where signature (#7735 - @jpbempel)
• Update signatures to match symDB format (#7723 - @evanchooly)
• Update the config parameter name to enable code origin (#7695 - @evanchooly)

Telemetry

• Add support for waf_timeout tag in telemetry (#7696 - @jandro996)

Testing

• Pin pubsub emulator docker version (#7767 - @amarziali)

Tracer core

• Avoid emission of endpoint events for client and producer root spans (#7732 - @richardstartin)
• ✨ Add support for TRACE_HTTP_CLIENT_ERROR_STATUSES (#7694 - @mhlidd)
• ✨ Remove version metadata for non DD_SERVICE spans (#7661 - @mhlidd)

Tracer public API

• ✨ Add support for TRACE_HTTP_SERVER_ERROR_STATUSES (#7716 - @mhlidd)

Instrumentations

Core Java language instrumentation

• Add taint propagation to the String indent method (#7707 - @Mariovido)
• Add propagation to String strip methods (#7684 - @Mariovido)

Eclipse Vert.x instrumentation

• 🐛 Avoid NPE on vertx end advice when parent span is not available (#7775 - @amarziali)

EventBridge instrumentation

• 💡 Inject trace context into EventBridge detail (#7613 - @nhulston)

gRPC instrumentation

• ✨⚠️ Disable grpc client message span by default (#7708 - @amarziali)

JDBC instrumentation

• 🐛 Append comment on MySQL JDB callables (#7742 - @sethsamuel)
• ✨ Add Hikari Pool Name tag (#7672 - @jordan-wong)

Kafka instrumentation

• Support Kafka-clients 3.8+ (#7626 - @nayeem-kamal)

Micronaut instrumentation

• Update Gradle dependencies and support micronaut 4.7.0 (#7759 - @github-actions[bot])

Protocol Buffer instrumentation

• Fix schema tracking for nested messages (#7690 - @piochelepiotr)
• 🐛 Remove dependency on abstract message in schema extractor (#7260 - @piochelepiotr)

Reactor instrumentation

• ✨ Add proper context propagation for reactive streams (#7644 - @amarziali)

All other instrumentations

• 🐛 Finish spans for all handlers for Grizzly http client (#7772 - @amarziali)

Other changes